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(54) Wireless subscriber terminal programming using a broadcast control channel 



(57) The invention is a system tor programming 
wireless subscriber terminals (WST's) using a broad- 
cast channel of a wireless communication system. A 
control program, for controlling operation of the WST, is 
updated using a series of messages transmitted from a 
base station over a broadcast control channel to one or 
more WST's simultaneously. Each message in the se- 
ries contains a segment of the control program, and the 
series of messages is interleaved with other control data 
on the broadcast control channel in order to avoid inter- 



ference with other call activities. When a WST identifies 
a message as containing a control program segment, 
the WST stores tha segment. Once a complete control 
program has boon received, control of the WST can be 
transferred to the new control program. Receipt of the 
broadcast transmission Is subject to interruption for a 
variety of reasons, e.g., a WST is powered off, a WST 
moves outside the range of a base station, other radio 
signals or noise interfere with the broadcast signal, or a 
call is received by a WST, which then transfers to a voice 
channel. 



CN 
< 

CO 



Q- 
LU 




ANTENNA 



110 



RF 
SYSTEM 



r 



24 



WST 



SYSTEM BUS 112- 



CPU 



122 



VOICE 
I/O 



114 



-H MEMORY 

c 



124 



NON- 
VOLATILE 
MEMORY 



126 



FIG. 3 



Printed by Jouvo, 7600 1 PARIS (FRj 



BEST AVAILABLE COPY 



1 



EP 1 049 346 A2 



2 



Description 

[0001] The invention relates to wireless systems, and 
more particularly to the reprogramming of wireless sub- 
scriber terminals in a wireless system using a broadcast 
control channel, 

[0002] A wireless subscriber terminal ('WST"). also 
known as a "subscriber" or a "mobile unit," is any mobile 
or fixed station providing a subscriber's point of interface 
to a wireless system, typically a cellular or wireless local 
loop system. WST's within the wireless system commu- 
nicate with a ba9e station, which manages calls across 
an air interface by subdividing the available spectrum 
Into a number of voice channels and control channels. 
The voice channels carry voice signals and other data. 
The control channels carry information needed to man- 
age the voice channels. Broadcast control channels are 
used to simultaneously transmit information to all of the 
terminals within range of a base station, as distin- 
guished from other voice/control channels that operate 
on a point-to-point basis. The present invention relates 
to a system for programming WST's over a wireless sys- 
tem using a broadcast control channel. 
[0003] As telephony techniques have advanced, 
WST's have become increasingly sophisticated. In ad- 
dition to radio frequency modulation/demodulation cir- 
cuitry for transmitting and receiving signals over a wire- 
less channel, WST's typically include signal processing 
for transforming audio information between analog and 
digital representations. A microprocessor or microcon- 
troller is also included, both for controlling the voice 
channel hardware and for providing higher level Junc- 
tions accessible to a WST user. These higher Ijevel func- 
tions, or 'features," include thosB functions familiar to 
the typical cellular phone user, such as a call-in-absence 
indicator, theft alarm, call restrictions, hands-free oper- 
ation, and handset attributes such as a phono number, 
security code, and ringer/alert capability. 
[0004] The microprocessor/microcontroller; requires 
its own software to control initialization of thejhardware 
when the WST is turned on. and to control operation of 
the WST while it remains on. This software, rbferred to 
here as a control program, is stored in a non-volatile 
memory so that it remains intact until actively erased. 
Ordinarily, the control program is installed by! the WST 
manufacturer before delivery. The non-volatile memory 
also typically contains programmable data relating to 
the identity of the particular WST and the feature set- 
tings for the WST. This programmable data is'ordinarily 
entered by a technician prior to delivery to an end user. 
[0005] The configuration options for WST features 
can also be programmed remotely. One approach is dis- 
closed in the specification of U.S. Patent No. 5.109,403, 
in which features are activated over a voice channel us- 
ing tones. In another approach, control channels are 
used to update WST features. While improving tho ver- 
satility of wireless systems, these approaches are con- 
strained lo setting feature switches, which are then in- 



terpreted by the control program to provide features to 
a WST user. They do not permit replacement of the con- 
trol program itsell. 

[0006] As control programs and available leatures 

5 change with the passage of time, it is sometimes desir- 
able to update the entire control program associated 
with a WST, as distinguished from pre-defined features. 
One method of updating control programs is disclosed 
in tho specification of U.S. Patent No. 5,430,877. This 

io approach uses a physical conneclion to update soft- 
ware. Another approach to roprogramming is disclosed 
in the specification of U.S. Patent No. 5,666,293. 
[0007] Thero remains e neod for a system to program 
WST's, I.e., suitable to wireless telephony, that permits 

is complete flexibility in WST programming/ reprogram- 
ming from a remote program database. 
[0008] The present invention includes a method for 
programming wireless subscriber terminals in a wireless 
system, the wireless system having a base station in 

20 wireless communication with the wireless subscriber 
terminals using one or more control channels and mul- 
tiple traffic channels, and each wireless subscriber ter- 
minal having a memory, a non-volatile memory, a proc- 
essor, and an original control program running on the 

2S processor to control operation of the wireless subscriber 
terminal, characterized by the steps of: 

A. initializing one or more participat ing wireless sub- 
scriber terminals from the base station, using a con- 

30 trol channel, to receive a complete program over a 

selected control channel; 

B. transmitting a complete program from the base 
station using the selected control channel, the com- 
plete program comprising a plurality of program 

•35 segments communicated lo the wireless subscriber 

terminals in separate messages; 

C. verifying that each panicipating wireloss sub- 
scriber terminal has received the complete pro- 
gram; 

40 D. sloring the complete program in the non-volatile 

memory of each participating wireless subscriber 
terminal as a new control program; and 
E. transferring control ot each panicipating wireless 
subscriber terminal to the new control program. 

[0009] The invention also includes a system for pro- 
gramming wireless subscriber terminals, the system 
comprising: 

so a base elation, the base station having a memory: 

a control program stored in the memory of the base 
station; 

one or more wireless subscriber terminals in wire- 
less communication with the base station over an 
se air interface, the air Interface comprising a plurality 

of traffic channels and a -plurality of control chan- 
nels; 

means for initializing the one or more wireless sub- 
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scriber terminals, using the control channels, to re- 
ceive the control program; 

means Tor broadcasting the control program to the 
one or more wireless subscriber terminals; 
means for verifying that each initialized wireless 
subscriber terminal has received the control pro- 
gram; and 

means for transferring control of each initialized 
wireless subscriber terminal to the control program. 

[001 0] Conveniently, the control program in a wireloss 
subscriber terminal is updated by means at control 
channel transmissions from a base station. The control 
program Is transmitted as a series of messages contain- 
ing program segments, interleaved with other messag- 
es on a broadcast control channel. When a WST iden- 
tifies a message as belonging to a control program ap- 
plicable to the WST the WST stores the program seg- 
ment contained in the message. 

[0011] Reception of the broadcast control channel by 
a WST can be interrupted by, for example, radio inter- 
ference, powering down, or movement of a WST beyond 
the range of a base station. Further, the WST must drop 
Ihe broadcast control channel and switch to a different 
physical channel for volce/daia traffic. Thus the WST Is 
not always in a condition to receive program messages. 
To address this problem, the base station arbitrates the 
transmission of unreceived program segments by poll- 
ing Individual WST's participating In the control program 
broadcast and retransmitting program segments 
missed by any of the WST's, 

[O012J The system preferably provides non-volatile 
storage of partial programs in each WST so that a WST 
need not receive an entire program in a single session. 
[O013] Thus the invention advantageously accom- 
plishes remote WST reprogramming in a manner that 
avoids use of the voico channels, and in a manner that 
doesnot require a continuous, uninterrupted connection 
to the broadcast control channel. 

[0014] The invention will now be described, by way of 
example, wilh reference to the accompanying drawings 
in which: 

Fig. 1 is a block diagram of a wireless communica- 
tion system; 

Fig. 2 is a block diagram of a base slation; 

Fig. 3 is a block diagram of a wireless subscriber 

terminal; and 

Fig. 4 is a diagram of the message formats used in 
the invention. 

Fig. 5 is a data flow chart showing the flow of data 
between a base station and wireless subscriber ter- 
minals. 

[0015] Figure 1 depicts a wireless communication 
system 10 according to the present invention, in which 
a base station 20 is in two-way wireless communication 
with wireless subscriber terminals (WST's) 24, and in 



further two-way communication with a landline system 
25 via a trunk 2S. The landline system 25 may be the 
public switched telephone network (PSTN), or any other 
wired network capable of voice/ data connections. If an 

5 active call is present on the trunk 26, the base station 
20 translates the forward trunk signal to a properly for- 
matted radio signal which is radiated by an anlerma 27 
to a WST 24 over the air interface 30. The WST 24 per- 
forms complementary operations to establish two-way 

to voico connections over the air interface 30. 

[0016] The term 'trunk," a3 used herein, refers to a 
conventional connection to a PSTN tor carrying a plu- 
rality of telephone signals, and is furthor intended to in- 
clude a plurality of such trunks, an individual subscriber 
line, or any other connection to a landline system 25. 
[0017] The terms such as "voice channel*' and "voice 
traffic", as usod herein, are intended to include the com- 
munication of conventional audio signals, as well as da- 
ta, such as facsimile or computer data, that might be 

*° carried by a tolophono system 25. 

[0018] The present invention includes an air interface 
30 having al leasl one control channel, distinct from Ihe 
voice channels, which can provide broadcast communi- 
cation to numerous WST's 24, along with bi-directional 
control communication between individual WST's 24 
and the base station 20. The present Invention is to be 
used primarily with a wireless local loop installed as an 
alternative to a landline, the communication system 10 
may also be a cellular or macro/micro-cellular system 

30 designed for mobile telephony and that certain adapta- 
tions may be made for such cellular applications. 
[001 9] The invention will be used with more, emerging 
standards such as GSM, PCS, and third generation 
standards derived from the IMT-2000 program. The tol- 
as lowing embodiment of the invention uses the digital sec- 
tor of the air interface 30 described by the Telecommu- 
nications Industry Association's IS-136 specification 
(IS- 1 36). Briefly stated, the digital sector ot 1S-1 36 Is a 
digitaf, time division multiple access (TDMA) technology 

to operating on 800 MHz and 1 900 MHz. 

[002O] As shown in Fig. 1, the IS-136 air interface 30 
includes digital traffic channels 32 which are two-way 
links for voice traffic. The air interface 30 also includes 
a digital control channel (DCCH) 34 having (logical) 

*s broadcast control channels for broadcasting information 
from the base station 20 to numerous WST's. The 
DCCH 34 also includes several (logical) point-to-point 
control channels for direct, two-way control communi- 
cation between each WST 24 and the base station 20. 

•50 This combination of control channels can be advrinlr-*- 
geously employed to effectively transmit an entire con- 
trol program to several participating WST's 24 while 
conserving the typically limiled digital traffic channels 32 
for voice tralfic between the landline system 25 and the 

ss WST's 24. 

[0021] As shown in Fig. 2, the base station 20 pro- 
vides an interface between the landline system 25 and 
the WST's 24. In order to function in this capacity, the 
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baso stalion 20 includes a MUX/switch SO on one hand 
to transmit and receive wired network voice traffic, and 
a radio frequency (RF) system 60 connecled to the an- 
tenna 27 on the other hand to transmit and receive wire- 
less voice traffic across Ihe air interface 30. A wireless 
access controller (WAC) 70 manages the operations of 
Ihe RF system 60 and the MUX/switch 50 to ensure that 
each wired voice connection is coupled to the correct 
channel of the air interlace 30. Tho WAC 70 also per- 
forms functions related to voice encoding, compression, 
encryption, and security. 

[0022] With respect to the present invention, the WAC 
70 performs several specific functions. First the WAC 
70 manages Ihe transmission of a control program over 
the broadcast control channel. The control program is 
stored in a memory SO in the base station 20. In order 
to transmit Ihe control program to the WST's 24, the 
WAC 70 divides the control program into program seg- 
ments which can be interleaved with other broadcast 
control channel transmissions, i.e., transmitted between 
other control messages so as to avoid interfering with 
ordinary operations of the wireless system 10. When it 
is desired to update the control program for the WST's 
that is stored in the memory 80 of the base station 20, 
for example, over the landline system 25, the wireless 
access controller 70 also manages the receipt of the 
control program over a trunk 26 and storage of the con- 
trol program in the memory 80. 

[0023] As shown In Fig. 3, a WST 24 transmits and 
receives signals ihrough the air interface 30 using an 
antenna 1 00 coupled to an RF system 110. The demod- 
ulated voice signal, or some encoded representation 
thereof, is carried on a system bus 11 2 to a voice signal 
port 114. In the preferred wireless local loop embodi- 
ment tho voice signal port 114 is a modular jack com- 
patible with standard local loop telephone cords, along 
wilh any appropriato conversion circuitry. Tho WST 24 
also includes a processor 1 22 connected to ihe system 
bus 112 for controlling operation of the WST 24, as well 
as a memory 1 24 for temporary storage and a non-vol- 
atile memory 1 26 for storage of a WST control program. 
[0024] The conuol program consists of a series of in- 
structions which the processor 122 can execute to con- 
trol operation of the WST 24. The term "firmware", as 
used in the lollowing discussion, is intended to refer to 
an executable firmware image tor use with a microcon- 
troller, as well as any other executable code, instruc- 
tions, or other software that might be used as a control 
program for a WST 24. Reprogramming the WST 24 
with a new control program comprises four general 
steps; (I) initialization, (2) program broadcast, (3) veri- 
fication, and (A) switch-over. These steps are now de- 
scribed in detail. 

1. Initialization: 

[0025] Before broadcast transmission of a new con- 
trol program, the base station 20 directly initializes each 



WST 24 by sending each WST 24 a broadcast firmware 
start (&FS) message 150 over a forward point-to-point 
control channel. Figure 4 shows tho format of the BFS 
message 1 50, which is used by each WST 24 to deter- 

s mine whether il should participate in the upcoming con- 
trol program broadcast. The BFS message 1 50 includes 
a hardware model number 152, a hardware version 
number 1 54. a firmware version number 1 56 for tho par- 
ticular control program, and a foaluro sot identifier 156. 

to Each WST 24 compares this information wilh stored in- 
formation to determine whether it should rocolvo the im- 
pending control program broadcast. 
[0026] The BFS message 1 50 also includes informa- 
tion which participating WST's 24 use to handle the sub- 

1£ sequent broadcast messages containing the new con- 
trol program. A transfer identifier 160 uniquely identifies 
the control program broadcast The same identification 
number is also included in all or the broadcast messages 
containing the new control program so that each WST 

20 24 can recognize them. A force transfer flag 162 can 
direct the recipient WST 24 to load the new control pro- 
gram even when the WST 24 already has a matching 
firmware version number 1 56. An automatic swilch-over 
flag 164 can bo used to instruct tho WST 24 to automat- 
es ically Iransfer control to Ihe new control program onca 
a complete program has been received. If the automatic 
switch-over flag 164 is not set, then the WST 24 waits 
for a command from the base station 20 to switch to the 
now control program. 

30 [0027] Further flexibility is provided by including, in 
the BFS message 150. a block size field 166 and a 
number-ol-blocks field 168. By transmitting these pa- 
rameters, the base station can adjust message lengths 
lor a particular control program broadcast. 

35 [0028] Each WST 24 receiving the BFS message 1 50 
replies with its own BFS response (BFSR) message 
180. This is a simplo iwo-part message- transmitted over 
a reverse control channel. The BFSR message 180 in- 
cludes the transler identifier 160 from tho BFS message 

to 150, and a response code 184 which indicates whether 
ihe WST 24 will participate in the pending control pro- 
gram transfer. 

[0029] The base station 20 receives a BFSR message 
1 60 from each WST 24. This information is stored in the 
*s memory 80 ol tho base station 20 tor use during the re- 
programming. At this point, initialization is complete- and 
the base station 20 may initiate a control program broad- 
cast. 

so 2. Control Program Broadcast; 

[0030] The base station 20 transmits segments of the 
nBw control program using broadcast firmware block 
(BFB) messages 190 transmitted over a broadcast 
ss channel. Each BFB message 190 has three pans. The 
transfer identifier 160 is again used to uniquely identity 
the control program broadcast. A block number 194 is 
included to allow for proper sequencing of control pro- 
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gram blocks. And, of course, the firmware block 196 It- 
self is included in the BFB message 190. The length of 
the firmware block 196 is specified in the (previously 
transmitted) BFS message 150. The BFB messages 
1 90 are interleaved with other broadcast channel trans* 
missions within a logical channel so as to permit other 
broadcast channel traffic required far normal operation 
of the wireless communication system 10. 
[0031] The base stalion 20 continues broadcasting 
BFB messages 190 until il has transmitted a complete 
control program. If tho broadcast channel was an error 
free, uninterrupted communication medium, this would 
conclude the firmware transfer. However, there is no 
guarantee that every BFB message 190 reaches every 
participating WST 24. Any number of events may cause 
a WST 24 to miss BFB messages 1 90, including a user 
powering off the WST 24, interference in the air inter- 
face, equipment failure, or the WST 24 switching to a 
digital traffic channel 32 lor normal call activities. Thus 
the wireless system proceeds to verify the control pro- 
gram broadcast. 

3. Verification; 

[0032] In order to verify the firmware broadcast, the 
base station 20 polls all of the participating WST's 24 
using broadcast firmware status request (BFSReq) 
messages 200, transmitted over one or more forward 
poinMo-point control channels. Each BFSReq message 
200 includes no message other than its own request for 
status inlormation. 

[0033] Each WST 24 responds 1o the BFSReq mes- 
sage 200 using a broadcast firmware status (BFStat) 
message 210. transmitted to the base station 20 over a 
reverse control channel. The BFStat message 210 in- 
cludes a status code 212 indicating the status of the re- 
ceived control program, o.g., iransfor incomplete, trans- 
fer complete, transler and switch-over complete. The 
status code 212 may also contain inlormation available 
from WST 24 self-te3ts, such as a hardwaro failure or 
unsuccessful switch-over while attempting to use the 
new control program. These self-tests are described be- 
low in reference to the switch-over to a new control pro- 
gram, but they may be conducted before or after the 
WST 24 receives a BFSReq message 200. 
[0034] As with the other messages, the BFStat mas- 
sage 210 includes the transfer identifier 160. Using a 
blocks received field 216 in the BFStat message 210, 
tho WST 24 also informs the base station 20 of the 
number ol blocks successfully received. Finally, the 
BFStat message 210 includes a missing block mask 21 8 
for identifying those blocks which have not been re- 
ceived. The missing block mask 21 8 is a multi-bit mask 
in which each bit represents a series of control program 
blocks. In a prelerred embodiment, the mask is 64 bits 
long and each bit Is mapped to a sequential, integer 
number of blocks representing approximately one sixty- 
fourth of the entire block range. By coding and decoding 



the missing blocks In this manner with a predetermined 
formula, each WST 24 can quickly and efficiently inform 
Ihe base station 20 of block ranges in which there are 
blocks missing. 

5 [0035] At this point, the base station 20 retransmits 
any missing control program blocks. The collective 
BFStat messages 210 received by the base station 20 
provide a complete picture of which blocks are missing 
from which WST's 24 within the wiroless system 10. In 

io order to fill these gaps, the base station 20 may employ 
a number of strategics. The base station 20 may simply 
re-broadcast a complete set of missing blocks, or the 
base station 20 may individually transmit blocks to each 
WST 24 using forward point-to-point control channels. 

'5 Where a single WST 24has missed a significant number 
ol blocks, it may even be desirable to Iransmit a sot of 
missing blocks using a (higher data rale) digital traffic 
channel. Alternatively. Ihe base station 20 may analyze 
the distribution and symmetry of missing blocks to select 

20 some mix of these two strategies which optimizes air 
interface traffic and/or speed. Any methodology can be 
employed, provided each participating WST 24 has a 
complete control program prior to switch-over. 

2S 4. Switch-over: 

[0036] The final message type of the reprogramming 
protocol is a firmware switch-over message 220, trans- 
mitted from the base station 20 to a WST 24 using a 

30 forward point-to-point channel. Upon receipt of the 
firm wa re switch-over message 220. the WST 24 stores 
the complete new control program in non-volatile mem- 
ory 126 and transfers control to the new control pro- 
gram. Optionally, the switch-over may be automatic, as 

35 when the automatic switch-over flag 164 is set in the 
initial BFS message 150. 

[0037] The old control program is retained after the 
switch-over, When the WST 24 Nr3t transfers control to 
the new control program, a series of internal verification 

40 lests are performed to ensure that the new control pro- 
gram is operating correctly. This includes conventional 
power-on self tests of memory 1 24 and system bus 112 
input/ outputs. Each item ol hardware used by the con- 
trol program, e.g., the RF unit 110, is also tested to en- 

45 sure that it is present and responding to the processor 
122. If the power-on tests are successfully completed, 
the WST 24 then attempts to access the broadcast con- 
trol channel used by the base station 20, using the new 
control program. If any of these lests are failed, the new 

so control program is rejected and the WST 24 restores the 
old control program. It all of these tests are successfully 
completed, the new control program is marked as "ac- 
cepted" (so that subsequent WST power-on's do not re- 
sult in an inappropriate rejection of the new control pro- 

£6 gram), and control of the WST 24 is unconditionally 
transferred to the new control program. 
[003B] Figure 5 shows the flow or data according to 
the programming method described above. The base 
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station 20 and each WST 24 are shown as vertical lines. 
The horizontal lines indicate da la flow between the base 
station 20 and each WST 24, with arrows Indicating the 
direction ol data flow. The initialization 240 comprises a 
BFS message 1 50 transmitted from the base station 20 s 
to each WST 24 on a point-to-point basis. Once each 
participating WST 24 has responded with a BFSR mes- 
sage 180. the base station performs a control program 
broadcast 250 by broadcasting the BFB messages 1 90 
containing control program blocks. It will be noted that io 
each BFB mossago 1 90 Is a single broadcast transmis- 
sion to all of the participating WST's 24. After all of the 
BFB messages 190 have been transmitted, The base 
station 20 performs a verification 260 of the broadcast 
This comprises BFSFt&q messages 200 from the base is 
station 20 to each WST 24 on a point-to-point channel, 
and a responsive BFStat message 210 Irom each WST 
24 to the base station 20. Where firmware switch-over 
is controlled from the base station 20, a final 3witch-over 
step 270 is performed by a Firmware Switch-Over mes- so 
sage 220 from the base station 20 to each participating 
WST 24. 

[0039] A number of varialions to this roprogramming 
system are possible once the basic update system is in 
place. Each WST 24 may store multiple control pro- zs 
grams for use at different times, with the base station 
20 controlling each switch-over as needed. Further, the 
reprogramming system may be used to provide soft- 
ware patches, that Is, Individual blocks of a control pro- 
gram may be replaced without replacing the entire im- 30 2. 
age. 

[0040] The invention is a system for programming 
wireless subscriber terminals {WST's} using a broad- 
cast channel of a wireless communication system. A 
control program, for controlling operation of the WST, is 35 
updated using a series of messages transmitted from a 
base station over a broadcast control channol to ono or 
more WST's simultaneously. Each message in the se- 
ries contains a segmeni of the control program, and the 
series of messages Is interleaved with other control data to 
on the broadcast control channel in order to avoid Inter- 
ference with other call activities. When a WST Identifies 
a message as containing a control program segmeni, 
the WST stores the segment. Once a complete control 
program has been received, control of the WST can be <? s 3. 
transferred to the new controt program. Receipt of the 
broadcast transmission is subject to interruption lor a 
variety of reasons, e.g., a WST is powered off. a WST 
moves outside the range of a base station, other radio 
signals or noise interfere with the broadcast signal, or a so 
call is received by a WST, which then transfers to a voice 
channel 

Claims 6 s 

1. A method for programming wireless subscriber ter- 
minals in a wireless system, the wireless system 



having a base station in wireless communication 
with the wireless subscriber terminals using one or 
more control channels and multiple traffic channels, 
and each wireless subscriber terminal having a 
memory, a non-volatile memory, a processor, and 
an original control program running on the proces- 
sor to control operation of the wireless subscriber 
terminal, characterized by the steps of: 

A. inilializing one or more participating wireless 
subscriber terminals from thn base station, us- 
ing a control channel, to receive a complete 
program over a selected control channel; 

B. transmitting a complete program from the 
base station using the selected control channel, 
the complete program comprising a plurality of 
program segments communicated to the wire- 
less subscriber terminals in separate messag- 
es; 

C. verilying that each participating wireless 
subscriber terminal has received the complete 
program; 

D. storing Iho complete program in the non-vol- 
atile memory of each participating wireless sub- 
scriber terminal as a new control program; and 

E. transferring control of each participating 
wireless subscriber terminal to the new control 
program. 

A method as claimed in claim 1 , characterized by 
the step of verifying including the steps of polling 
each participating wireless subscriber terminal, us- 
ing one or more control channels, to determine 
whether any participating wireless subscriber termi- 
nals have not received any program segments; re- 
transmitting Irom the base station the program seg- 
ments that any participating wirofoss subscriber ter- 
minals have not received, the unreceived program 
segments are retransmitted over one or more point- 
to-point control channels, and the unreceived pro- 
gram segments are retransmitted over one or more 
broadcast control channels, or retransmitted over 
one or more traftic channels. 

A method as claimed in claim 1, characterized by 
the step of verifying comprises the step of perform- 
ing a series of diagnostic tests at each participating 
wireless subscriber terminal to determine the valid- 
ity of the new control program received at that wire- 
less subscriber terminal, and including the stop of 
sloring each program segment received by the 
wireless subscriber terminal in the non-volatile 
memory of the wireless subscriber terminal, so that 
the wireless subscriber terminal retains all received 
program segments If reception of program seg- 
ments by the wireless subscriber terminal is inter- 
rupted 
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4. A method as claimed in claim 1 characterized by 
the slop of storing the original control program in 
non-volatile memory after transferring control of the 
processor to the new control program. 

5 

5. A method as claimed in any one of claims 1 to 4 
characterized by the control program and the new 
control program each comprise a software patch for 
controlling less lhan all of the operations of the wire- 
less subscriber terminal, and preferably the wire- »o 
loss subscriber terminal is a cellular phono. 

6. A method as claimed in claim 5 characterized by 
the wireless subscriber terminal is a terminal of a 
wireless local loop, and the step of transferring con- 1S 
trol to the new control program is forced by the base 
station during the step of initializing each wireless 
subscriber te rmlnal. 

7. A system for programming wireless subscriber ter- 20 
minals, the system comprising: 

a base station, the base station having a mem- 
ory; 

a control program stored In the memory of the zs 
base station; 

one or more wireless subscriber terminals in 
wireless communication with the base station 
over an air interface, the air interface compris- 
ing a plurality of traffic channels and a plurality 30 
of control channels; 

means for initializing the one or more wireless 
subscriber terminals, using the control chan- 
nels, to receive the control program; 
means for broadcasting the control program to 3S 
the one or mora wireless subscriber terminals; 
means tor verifying that oach initialized wire- 
less subscriber terminal has received the con- 
trol program; and 

means for transferring control of each Initialized *o 
wireless subscriber terminal to the control pro- 
gram. 

8. A system as claimed in claim 7, characterized in that 

the one or more wireless subscriber terminals com- 45 
prise cellular phone handsets, and preferably the 
one or more wireless subscriber terminals comprise 
wireless local loop terminals. 

0. A base slalton for programming one or more wire- so 
less subscriber terminals in a wireless system, tho 
base station comprising a memory, a control pro- 
gram stored in the memory as one or more program 
segments, a transmitter for transmitting forward 
messages to wireless subscriber terminals over an 
air interlace, the forward messages including the 
one or more program segments stored in the mem- 
ory, a receiver for receiving rovcrsc mossagos Irom 



wireless subscriber terminals over the air interlace, 
a processor connected to the memory, the transmit- 
ter, and the receiver for controlling operation of the 
base station, the forward messages including 
broadcast firmware start messages and the reverse 
messages including broadcast firmware start re- 
sponse messages. 

10. A baso station as claimod in claim 9 charactorized 
in that tho forward mossagos including broadcast 
firmware status request messages and the rovcrsc 
messages including broadcast firmware status 
messages. 

11. A method for operating a base station lo program 
one or more wireless subscriber terminals in a wire- 
less system, the method comprising the steps of: 

A. initializing a plurality of wireless subscriber 
terminals, using a control channel, to receive a 
control program; 

B. broadcasting tho control program to the plu- 
rality ol wireless subscriber terminals; 

C. verifying that each one of tho plurality of 
wireless subscriber terminals has received the 
control program; 

D. transferring comrol of each one of the plu- 
rality of wireless subscriber terminals to the 
control program; and 

E. transmitting a broadcast firmware start mes- 
sage to each wireless subscriber terminal over 
one or more forward channels and receiving a 
broadcast firmware start response, message 
from one or more participating wireless sub- 
scriber terminals over one or more reverse 
channels. 

12. A method as claimed in claim 11 characterized by 
tho step of broadcasting including the step of trans- 
mitting one or more broadcast firmware block mes- 
sages over a broadcast channel, and transmitting a 
broadcast firmware status request message to one 
or more participating wireless subscriber, terminal 
over one or more forward channels, receiving a 
broadcast firmware status message from one or 
more of the one or more participating wireless sub- 
scriber terminals, and retransmitting any missing 
program segments to the one or more participating 
wireless subscriber terminals. 

13. A wireless subscriber terminal for use in a wireless 
system, the terminal comprising a memory, a trans- 
mitter for transmitting reverse messagos from the 
terminal over an air interface, a receiver tor receiv- 
ing forward messages from a base station, the for- 
ward messages including the one or more program 
segments, a processor connected to the memory, 
tho transmitter, and tho receiver 1or controlling tho 



30 



35 



7 



13 



BP 1 049 346 A2 



terminal, and for storing the one or mora program 
segments in the memory, in which the forward mes- 
sages include broadcast firmware start messages 
and the reverse massages include broadcast 
firmware start response messages, and the forward 5 
messages also include broadcast firmware status 
request messages and the reverse messages in- 
clude broadcast firmware status messages, with 
the forward messages include firmware switch-over 
messages, and the forward messages including the io 
one or more program segments are broadcast mes- 
sages. 

1 4. A method for operating a wireless subscriber termi- 
nal in a wireless system to receive a control pro- '5 
gram, the method comprising the steps of Initializing 
a terminal, using a control channel, to receive a con- 
trol program, the control program comprising a plu- 
rality of control program segments, receiving, a 
broadcast comprising the plurality of control pro- 20 
gram segments, verifying that the terminal has re- 
ceived all of the control program segments, trans- 
ferring control of the terminal to the control program, 
including the step of initializing further comprising 
the steps of receiving a broadcast firmware start 2S 
message over a forward channels and transmitting 
a broadcast firmware start response message over 
a reverse channel, the step ol receiving a broad- 
casting further comprising the step of receiving a 
plurality of firmware block messages over a broad- 30 
cast channel, the step of verifying including the 
steps of. receiving a broadcast firmware status re- 
quest message over a forward channels, transmit- 
ting a broadcast firmware status message over a 
reverse channel, the broadcast firmware status -35 
message identifying any missing control program 
segments, receiving any missing control program 
segments identified in the broadcast firmware sta- 
tus message, and the step of transferring control 
further comprising the step of receiving a firmware *o 
3Witch-over message. 
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